1930EF

Description

LANCOM 1930EF. Product color: Black, Rack capacity: 1U, Housing material: Metal. Antenna type: Internal. Supported network protocols: DNS, HTTP, HTTPS, ICMP, NTP/SNTP, NetBIOS, PPPoE (server), RADIUS, RADSEC (secure RADIUS), RTP,…, Router protocol: LISP, OSPFv2, Supported protocols: Ethernet over GRE Tunnel (EoGRE), L2TPv3, ARP Lookup, LLDP, DHCP option 82,…. Ethernet LAN data transfer rates: 10, 100, 1000 Mbps, Network standard: IEEE 802.1Q, Cabling technology: 10/100/1000Base-T(X). Supported security algorithms: 3DES, 128-bit AES, 192-bit AES, 256-bit AES, 1024-bit RSA, 4096-bit RSA, SHA-256, SHA-384, SHA-512, Authentication method: PAP, CHAP, MS-CHAP, MS-CHAPv2

Multi-WAN SD-WAN Gateway with Fiber and Gigabit Ethernet
For site networking in medium-sized and large companies, the LANCOM 1930EF is a multi-WAN SD-WAN gateway that offers a flexible range of Internet connections on a single device. Any external DSL or cable modem can be connected via Gigabit Ethernet. Connecting to fiber optic lines via an optional module also provides high-speed Internet access, even with data-intensive traffic. Intelligent load balancing across two Internet lines increases available bandwidth and reduces network utilization. The LANCOM Management Cloud (LMC) centralizes the management of the LANCOM 1930EF, ensures consistent and secure network management, and benefits from security “Engineered in Germany.”

LANCOM SD-WAN – Next-level networking
With LANCOM SD-WAN, you can manage and monitor your entire corporate network centrally, cost-effectively, quickly, and stress-free! In combination with the LANCOM Management Cloud, the SD-WAN gateway opens up all the possibilities for automated setup of secure VPN connections (Auto-VPN) between locations, including network virtualization. Highlight features such as High Scalability VPN (HSVPN) and Advanced Mesh VPN offer you significant scalability and efficiency gains for multiple branch offices and applications. Furthermore, if multiple WAN connections are defined, they are automatically operated in active/active mode (load balancing), thereby increasing the total available bandwidth. Dynamic Path Selection and Dynamic Traffic Steering also dynamically route applications via the currently best connection.

High-performance Gigabit Multi-WAN & Load Balancing
The LANCOM 1930EF allows you to flexibly use a wide variety of internet connections on a single device: The gateway can be connected directly to a fiber optic line (FTTH) via the SFP/TP combo port and a separately available SFP module (GPON/AON). Furthermore, the SD-WAN gateway offers high flexibility via Gigabit Ethernet for connecting to external modems. With the parallel use of multiple internet connections (load balancing: active/active), the LANCOM 1930EF also ensures ideal data load distribution and further increases the available bandwidth.

Advantages
High Scalability VPN (HSVPN)
Constantly growing digitalization, increasing application diversity, and larger data volumes require powerful and modern networks. High Scalability VPN significantly improves the scalability and efficiency of your architecture. Where previously a separate VPN tunnel was required for each application, HSVPN bundles any number of networks into a single VPN tunnel and transports them collectively to the remote site – each network remaining secure and strictly separated from each other. The advantage for your business: significantly fewer VPN tunnels are required and faster recovery times in the event of failover. And if you still need more VPN tunnels, the LANCOM VPN 100 option is available, allowing you to securely integrate up to 100 locations or remote employees into the corporate network simultaneously.

Security thanks to ARF, VLAN and Stateful Inspection Firewall
Equipped with a stateful inspection firewall, the LANCOM SD-WAN gateway protects the entire network with features such as intrusion prevention and denial of service protection. Logical network segmentation allows you to define individual security settings and access rights based on user requirements, as well as divide your infrastructure and applications into different areas. This network segmentation, using ARF (Advanced Routing and Forwarding) and VLAN (Virtual Local Area Network), ensures that your corporate network remains protected as a whole, even if a network segment is compromised.

Secure communication via VPN
With virtual private networks (VPNs), you use the public internet as a communication channel and secure the connection so that it remains completely inaccessible to outsiders. This SD-WAN gateway already offers 25 integrated IPSec VPN channels for secure encryption, ensuring the protection of internal company data when connecting mobile employees, home offices, or branch offices. With the LANCOM VPN Option, you can also upgrade the device to up to 100 VPN channels, allowing the infrastructure to easily grow as needed, even without additional hardware.

Maximum future security and digital sovereignty
As an established German manufacturer of IT network solutions, LANCOM stands for reliability and expertise. Software and hardware development and manufacturing take place primarily in Germany, as does network management hosting. Particular attention is paid to GDPR-compliant trustworthiness and data security. The company is committed to ensuring its products are free of backdoors and is a holder of the “IT Security Made in Germany” quality seal initiated by the German Federal Ministry for Economic Affairs and Energy. All devices are equipped with future-proof hardware dimensions. Updates to the LANCOM operating system family are available free of charge several times a year, even across product generations. This guarantees long-term use with the latest technology and offers true investment protection. Furthermore, LANCOM infrastructures are easily scalable thanks to maximum compatibility.

Possible application scenarios
Application scenario with one client
A client is connected to the internet via the Multi-WAN SD-WAN Gateway in active/active mode (load balancing). Load balancing is used to distribute the network's data load across internet lines used in parallel. This way, data connections are evenly distributed across (at least) two lines, and the individual bandwidths of the lines are summed. In this scenario, the load balancer integrated into the SD-WAN Gateway decides whether to use internet line 1 or internet line 2 depending on the load. Even if one line fails, the connection via the other line is always secured.

Application scenario with two or more clients
Several clients are connected to the internet via the Multi-WAN SD-WAN gateway (two external modems for any connection). Now, for example, two clients can work in parallel with the same download speed thanks to the router's integrated load balancer, which allows the data load to be distributed across both internet lines (1 & 2). This allows for maximum utilization and, consequently, a significant increase in network efficiency.

Application scenario with VPN load balancing
The integrated load balancer also allows for convenient grouping of IKEv2 VPN connections into a load balancer cluster. Regardless of whether the cluster is implemented with a LANCOM SD-WAN Gateway, a LANCOM SD-WAN Central Site Gateway (e.g., LANCOM ISG-5000), or the LANCOM vRouter, the clustering improves load distribution and automatically takes over data traffic in the event of a connection failure. This significantly increases the VPN bandwidth for multiple clients.